Moodle: user information visibility control issues in gradeb… (CVE-2024-43429)

Summary

Moodle: user information visibility control issues in gradebook reports

Original description

The description as published by the source.

A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Affected packages

Bitnami moodle

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.1.12"},{"introduced":"4.2.0"},{"fixed":"4.2.9"},{"introduced":"4.3.0"},{"fixed":"4.3.6"},{"introduced":"4.4.0"},{"fixed":"4.4.2"}]}]

References

advisory nvd.nist.gov
advisory github.com
package github.com
report bugzilla.redhat.com
web moodle.org